So Irregular used the model to hack some real foo.com with the excuse that they meant to run in an environment where they were serving a fake foo.com!?

This seems like a very mild reaction on OpenAIs part.